BPF数据包过滤器的分析与研究  

Analysis and study of BPF

作　　者：王景琪[1] 左明[1] 张功杰[2] 

机构地区：[1]中国矿业大学现代教育中心,江苏徐州221008 [2]徐州师范大学计算机科学与技术学院,江苏徐州221116

出　　处：《计算机工程与设计》2005年第9期2384-2385,2394,共3页Computer Engineering and Design

摘　　要：随着网络的迅速发展,信息量的增大,大量的无效数据降低了网络监控的效率,对网络数据包的捕获和过滤变得尤为必要了。BPF数据包过滤器以其简洁的结构在计算机内核中对数据报进行第1层过滤,减轻了用户层工作的负担并且提高了抓包率。研究了BPF的工作原理和过滤模型并且提出了在Windows系统下如何运用BPF过滤器开发包过滤系统。BPF数据包过滤器在网络监控方面有巨大的研究和使用价值。With the rapid development of the network and the increase of the amount of information, a large amount of invalid data have reduced the efficiency of the network monitoring, It becomes particularly essential to catch and filter these network packets. BPF filters packets with succinct structure among computer kernel, lightened burden of working and improved the rate of stressing packets among the user layer. The operation principle and model of filtering for BPF were researched and how to use BPF to develop data filter system under Windows System was put forward.

关 键 词：BPF 网络监控 过滤器模型 

分 类 号：TP393.06[自动化与计算机技术—计算机应用技术]